1. Scope and Important HIPAA Notice

M&K Counseling Associates Inc. (collectively, “M&K,” “we,” “us,” or “our”) respects your privacy. This Website
Privacy Policy explains how we collect, use, disclose, and protect information when you visit
https://mkcounselingdc.com/ and pages that link to this policy (the “Website”). It applies to information
collected through the Website and does not replace our Notice of Privacy Practices.
M&K is a health care provider subject to the Health Insurance Portability and Accountability Act of 1996 and its
implementing regulations (“HIPAA”). Information that identifies you and relates to your health, treatment, or
payment for care may be protected health information (“PHI”). Our use and disclosure of PHI are governed by
HIPAA and our Notice of Privacy Practices. If this Website Privacy Policy conflicts with our Notice of Privacy
Practices regarding PHI, the Notice of Privacy Practices controls.
The Website is for informational and administrative purposes and is not intended for emergency
communications. If you are experiencing a medical or mental health emergency, call 911 or 988, or go to the
nearest emergency room.

2. Information We Collect

We may collect the following categories of information:

• Information you provide. This may include your name, contact information, insurance or payment
  information, appointment or service requests, intake information, signed forms, communications, and
  other information you choose to provide. Information submitted for treatment, payment, or health care
  operations may constitute PHI.
• Website and device information. When you use the Website, we and our service providers may
  automatically collect information such as your Internet Protocol address, browser and device type,
  operating system, referring pages, pages viewed, approximate location derived from your IP address,
  dates and times of visits, links selected, and advertising or cookie identifiers.
• Information from third parties. We may receive information from service providers that support our
  Website, forms, analytics, advertising, communications, scheduling, billing, security, or other operations.

Please do not include sensitive clinical details in a general Website contact field unless the field is specifically
identified as a secure patient form. Use the secure method designated by M&K for intake forms, clinical records,
and other sensitive information.

3. How We Use Information
We may use information to:

• respond to inquiries, evaluate requests for services, schedule appointments, and communicate with
  you;
• provide treatment and related health care services, process payment, and conduct health care
  operations as permitted by HIPAA and described in our Notice of Privacy Practices;
• operate, maintain, secure, troubleshoot, and improve the Website and our services;
• measure Website use and the effectiveness of our outreach and advertising;
• prevent fraud, misuse, security incidents, and other harmful activity; and
• comply with law, professional obligations, legal process, and enforceable agreements.

We do not use or disclose PHI for marketing except as permitted by HIPAA or with a valid authorization when
one is required.

4. Cookies, Google Analytics, and Google Ads

The Website may use cookies, pixels, tags, and similar technologies. We use Google Analytics to understand how
visitors use the Website and Google Ads to measure and support advertising. These services may collect Website
and device information and may place or read cookies or similar identifiers. Google may use information
collected through these technologies in accordance with its own policies.

We do not intentionally send names, contact details, form contents, appointment information, clinical
information, or other PHI to Google Analytics or Google Ads. We do not place Google Analytics or Google Ads
technologies within secure patient forms, patient portals, or other authenticated areas used to collect or display
PHI.

You may control cookies through the cookie controls made available on the Website and through your browser
settings. Blocking cookies may affect certain Website functions. You may also use the Google Analytics Opt-out
Browser Add-on and Google’s advertising settings. Choices are specific to the browser and device on which they
are made and may need to be renewed if cookies are deleted.
Google Analytics opt-out: https://tools.google.com/dlpage/gaoptout
Google advertising settings: https://myadcenter.google.com/

5. Online Forms and pdfFiller

M&K may use pdfFiller to provide or process intake forms, acknowledgments, authorizations, and other patient
documents. Information submitted through those forms may include PHI. We use service providers that handle
PHI on our behalf only as permitted by HIPAA and, when required, under a business associate agreement. Do
not submit patient information through a form unless it is provided or approved by M&K for that purpose.

6. When We Disclose Information

We may disclose information:

•  to service providers that perform services for us, subject to appropriate contractual, privacy, and
  security obligations and, for PHI when required, a HIPAA-compliant business associate agreement;
• to health plans, health care providers, and others as permitted by HIPAA and described in our Notice of
  Privacy Practices;
• when you direct us to disclose information or provide a valid authorization;
• to comply with applicable law, licensing requirements, court orders, subpoenas, or other legal process,
  or to protect rights, safety, and security; and
• in connection with a merger, acquisition, reorganization, financing, or transfer of all or part of our
  practice, subject to applicable legal restrictions.

We do not sell PHI. We do not sell personal information collected through the Website for money. We do not
disclose PHI to advertising platforms for their own advertising purposes.

7. Data Retention and Security

We retain information for as long as reasonably necessary for the purposes described in this policy, to provide
services, and to satisfy legal, professional, accounting, insurance, and record-retention obligations. Retention
periods vary based on the type of information and the reason it was collected.

We use reasonable administrative, technical, and physical safeguards designed to protect information. No
Internet transmission or storage system is completely secure. Please use the secure communication and form
channels designated by M&K for sensitive information.

8. Your Choices and Rights

You may use available Website cookie controls and browser settings to limit cookies. You may unsubscribe from
non-clinical promotional emails by using the unsubscribe instructions in the message. We may continue to send
treatment, scheduling, billing, safety, legal, and other non-promotional communications.

HIPAA may give you rights concerning your PHI, including rights to inspect or obtain a copy of certain records,
request an amendment, request restrictions, request confidential communications, receive an accounting of
certain disclosures, and obtain a paper copy of our Notice of Privacy Practices. These rights and any applicable
limitations are described in our Notice of Privacy Practices. To exercise a HIPAA right, contact M&K using the
information in Section 12.

9. Children’s Information

Our services may include care for minors when arranged by a parent, guardian, or other legally authorized
person. The Website is not directed to children to use independently, and we do not knowingly collect personal
information online from children under 13 without authorization from a parent or guardian. If you believe a
child submitted information through the Website without appropriate authorization, please contact us. Patient
records concerning minors are handled in accordance with HIPAA and applicable law.

10. Third-Party Websites

The Website may link to websites or services that M&K does not operate. Their privacy and security practices
are governed by their own notices and terms. We are not responsible for third-party websites or services that
are not acting on our behalf.

11. Changes to This Policy

We may revise this Website Privacy Policy from time to time. We will post the revised policy on the Website and
update the effective date. Material changes will apply prospectively unless otherwise permitted by law.

12. Contact Us

For questions about this Website Privacy Policy, our privacy practices, or your HIPAA rights, contact:
M&K Counseling Associates Inc.
4414 5th St NW, Washington DC, 20011
Telephone: (202) 670-3017
Website contact page: https://mkcounselingdc.com/contact/
Do not include sensitive clinical information in a general email or Website contact message.